$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: pKQnvL84IXqgFp9kwuPoNQg9n2ts+4JUm4qVvjYZzF8= Subject key identifier: 8F:51:14:FE:62:0D:2D:3B:1B:81:D1:98:58:B3:C6:77:3B:59:71:69 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: 1F0066968B31D1F200A3EE032B53F3EA9A7D6280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 03A3 Signing time: Sat 28 Jun 2025 13:50:05 +0000 Manifest this update: Sat 28 Jun 2025 13:45:05 +0000 Manifest next update: Wed 02 Jul 2025 00:23:05 +0000 Files and hashes: 1: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=) 2: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: DVQtArc7+twR6KbwNeibrulCP2GgoFJ/8i8gHrHpjh8=) 3: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: 51VMCg6u8hW+9yY7Sn/sArynIKu6/fuS0HKX6tpsX6I=) 4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: raVa/aPOEsczd+Tkb9xbGBhDO0WYbX1nl1AOZt1Q+7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:00:66:96:8b:31:d1:f2:00:a3:ee:03:2b:53:f3:ea:9a:7d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Jun 28 13:45:05 2025 GMT Not After : Jul 2 00:23:05 2025 GMT Subject: CN=8F5114FE620D2D3B1B81D19858B3C6773B597169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:01:f1:5c:5a:a1:e5:b0:a8:e9:8b:d3:dd: 00:d3:e4:06:b7:26:19:63:bf:86:cc:b1:12:c5:ff: 8d:b8:3f:b0:19:23:a9:f0:45:4d:1c:ca:ff:2e:3b: 43:c3:45:4d:a4:a3:0d:da:54:a4:75:71:ab:73:2f: c8:1d:3a:7b:1c:31:c8:18:85:53:8d:01:c6:8f:8c: a1:d9:f4:c4:a6:b2:12:f0:db:61:96:cf:2d:bf:c4: 9b:74:59:58:9c:7a:7d:dc:6e:67:03:d3:a1:bf:5d: 55:a0:d1:19:8e:34:cd:a8:f6:fd:0f:ed:92:83:7e: 60:36:3d:34:43:ed:bf:e3:9e:5c:26:a0:47:91:57: fe:b6:80:fb:2c:06:e7:9a:45:26:69:bb:96:66:78: ac:c8:94:c6:bb:d6:4c:b4:a5:24:47:71:e5:05:17: e2:66:06:72:db:b5:a4:24:02:9f:ca:a5:3a:00:96: 12:c4:0a:cc:d7:f2:3e:93:0b:4e:c6:80:7d:2c:88: 67:a0:72:0e:b5:fc:3b:27:35:a1:1f:a6:61:7e:a1: e9:ff:69:be:61:81:1c:c2:8f:7e:84:55:00:ee:fd: b5:b7:8e:8d:c0:b4:66:8e:c3:94:1c:9e:26:49:14: 81:f7:13:47:6e:08:36:36:cf:97:9a:e9:e2:9c:9c: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:51:14:FE:62:0D:2D:3B:1B:81:D1:98:58:B3:C6:77:3B:59:71:69 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:72:8d:16:27:c7:5e:64:07:dd:fb:dd:d4:59:aa:78:24:3f: b6:49:0f:8b:45:bd:93:ba:a6:98:52:11:57:27:2f:b3:a8:c1: 65:1e:da:60:d8:bb:10:31:90:cc:4f:00:23:b1:ea:9f:ae:28: 76:57:1f:3d:da:8c:ec:07:1a:2d:5d:dc:45:85:95:4f:7e:fe: bc:23:80:b4:19:49:63:3b:45:34:9f:04:94:6b:d3:ad:36:0f: 15:e6:85:32:3b:0a:4c:3d:d9:d9:d0:f0:c8:5b:58:f0:46:52: 86:a1:f4:c0:76:b9:8d:ec:26:07:b2:d6:52:2c:73:73:3a:37: 08:ab:24:d7:f9:66:23:a1:b6:2e:97:b8:d6:ec:8f:8b:1c:63: 71:7c:d3:0c:cf:97:36:3f:80:f0:da:c3:b1:93:85:b7:41:f5: 5e:9c:eb:3d:a0:64:97:9f:5b:46:5d:ca:9c:63:81:25:dc:30: 0e:da:45:74:86:e2:f0:8f:ff:dc:8f:36:6a:ba:32:9e:ac:12: fc:34:40:ce:47:90:d0:5c:10:14:80:f4:c4:f6:f2:ea:8b:09: 0e:c6:97:28:04:bc:eb:63:e9:04:9a:cd:7c:ac:da:9c:5d:a8: ec:5a:de:d6:f6:ec:41:4f:b9:72:86:ff:1b:22:3a:88:93:57: ad:e3:ce:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwBmlosx0fIAo+4DK1Pz6pp9YoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNTA2MjgxMzQ1MDVaFw0yNTA3MDIwMDIzMDVaMDMxMTAvBgNV BAMTKDhGNTExNEZFNjIwRDJEM0IxQjgxRDE5ODU4QjNDNjc3M0I1OTcxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbQHxXFqh5bCo6YvT3QDT5Aa3 Jhljv4bMsRLF/424P7AZI6nwRU0cyv8uO0PDRU2kow3aVKR1catzL8gdOnscMcgY hVONAcaPjKHZ9MSmshLw22GWzy2/xJt0WVicen3cbmcD06G/XVWg0RmONM2o9v0P 7ZKDfmA2PTRD7b/jnlwmoEeRV/62gPssBueaRSZpu5ZmeKzIlMa71ky0pSRHceUF F+JmBnLbtaQkAp/KpToAlhLECszX8j6TC07GgH0siGegcg61/DsnNaEfpmF+oen/ ab5hgRzCj36EVQDu/bW3jo3AtGaOw5QcniZJFIH3E0duCDY2z5ea6eKcnCGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1EU/mINLTsbgdGYWLPGdztZcWkwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFyjRYnx15kB9373dRZqngkP7ZJD4tFvZO6 pphSEVcnL7OowWUe2mDYuxAxkMxPACOx6p+uKHZXHz3ajOwHGi1d3EWFlU9+/rwj gLQZSWM7RTSfBJRr0602DxXmhTI7Ckw92dnQ8MhbWPBGUoah9MB2uY3sJgey1lIs c3M6NwirJNf5ZiOhti6XuNbsj4scY3F80wzPlzY/gPDaw7GThbdB9V6c6z2gZJef W0ZdypxjgSXcMA7aRXSG4vCP/9yPNmq6Mp6sEvw0QM5HkNBcEBSA9MT28uqLCQ7G lygEvOtj6QSazXys2pxdqOxa3tb27EFPuXKG/xsiOoiTV63jzqo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:26:54 2025 by rpki-client